it depends on where your application server sits.. if it's in the voice zone you shouldn't need any changes, but if not, you definitely need to open ports. The ports needed are mentioned in the JTAPI developer guide (it's a single one.. and another one if you use secure JTAPI). Of course, if you want to do media (cti ports, cti routepoints) then you'll need a whole bunch of ports (the JTAPI port plus whatever ports the phones use.. I don't have the link handy but it's part of the callmanager documentation.. a single PDF that lists all ports the callmanager ever uses, including the JTAPI port).
